It often means that one could have derived the correct password from the set of rules - but those rules are not shown when asking for the old password